yubisigner v0.1.2 released. It has now two additional buttons. CMT (Create Merkle Tree) and VMT (Verify Merkle Tree), which is useful if you like to generate a merkle-tree.txt file of your source code folder, prior uploading, so that third parties can not manipulate your uploaded source code. It is highly recommended to sign merkle-tree.txt with yubisigner too and additionally time stamp the .sig file with opentimestamps.org.
https://github.com/Ch1ffr3punk/yubisigner Hope you like! On Tuesday, March 10, 2026 at 10:05:51 PM UTC+1 Stefan Claas wrote: > Dear go-nuts community, > > I have released yubisigner, which is a modern replacement for > GnuPG and signify-openbsd detached signatures, which is more > versatile and does not allow faking headers by third parties, like > the Comment: header in GnuPG or the untrusted-signature: header > in signify-openbsd. > > I would appreciated if you take a look at yubisigner and if you like > yubisigner, as much as I do, to leave feedback. > > Please note: the Windows and Linux binary, under Releases, is > signed with yubisigner v0.1.1 and the two .sig files are additionally > time stamped with opentimestamps.org. > > https://github.com/Ch1ffr3punk/yubisigner > > Hope you like! > > Best regards > Stefan -- You received this message because you are subscribed to the Google Groups "golang-nuts" group. To unsubscribe from this group and stop receiving emails from it, send an email to [email protected]. To view this discussion visit https://groups.google.com/d/msgid/golang-nuts/b4b2baca-a7f0-44c7-aedd-2a66ffa2fefen%40googlegroups.com.
